pull
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions define standard Git workflows for rebasing and branch synchronization. No malicious patterns such as credential theft, unauthorized network access, or persistence mechanisms were detected.\n- [NO_CODE]: The provided files contain only descriptive text and configuration metadata. There are no executable scripts, shell commands, or external dependencies associated with this skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions for handling Git conflicts, which necessitates reading content from external files. This creates a surface where malicious instructions embedded in a code conflict could attempt to influence the agent's behavior.\n
- Ingestion points: File content during conflict resolution (referenced in SKILL.md)\n
- Boundary markers: None\n
- Capability inventory: Git operations including fetch, rebase, and branch resolution\n
- Sanitization: None
Audit Metadata